Overview
overview
3Static
static
3BouncyCast...to.dll
windows7-x64
1BouncyCast...to.dll
windows10-2004-x64
1BrotliSharpLib.dll
windows7-x64
1BrotliSharpLib.dll
windows10-2004-x64
1DiscordRPC.dll
windows7-x64
1DiscordRPC.dll
windows10-2004-x64
1Downloader.dll
windows7-x64
1Downloader.dll
windows10-2004-x64
1ICSharpCod...ib.dll
windows7-x64
1ICSharpCod...ib.dll
windows10-2004-x64
1Memory.dll
windows7-x64
1Memory.dll
windows10-2004-x64
1MetadataConverter.dll
windows7-x64
1MetadataConverter.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1RestSharp.dll
windows7-x64
1RestSharp.dll
windows10-2004-x64
1System.Management.dll
windows7-x64
1System.Management.dll
windows10-2004-x64
1Titanium.W...xy.dll
windows7-x64
1Titanium.W...xy.dll
windows10-2004-x64
1YuukiPS.exe
windows7-x64
1YuukiPS.exe
windows10-2004-x64
1YuukiPS.exe
windows7-x64
1YuukiPS.exe
windows10-2004-x64
1runtimes/w...nt.dll
windows7-x64
1runtimes/w...nt.dll
windows10-2004-x64
1General
-
Target
YuukiPS.zip
-
Size
3.4MB
-
Sample
231011-qprqwahh61
-
MD5
0570063d34559d3df1c53837954a817a
-
SHA1
16513209641ed91e68cd823645f90bb966c967fe
-
SHA256
a135c624af7aba4da0128dc5e870d37f2a7b206576d592c94660a416dac2d117
-
SHA512
e7d7609e67525bb0c6b0023eb764fcf498ed3256e23674f3fb947a205741b1f8e1047aa7f9d25bb389a103acf816c9b9d2287be0e38c2e4e3447874e8bdaac41
-
SSDEEP
98304:xWZv9Li/stu1USJ+qep9uNu4mbQL7gUf8BbL+5jWU:gzmauRep9uNuHbQL7gUgL+5jWU
Static task
static1
Behavioral task
behavioral1
Sample
BouncyCastle.Crypto.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
BouncyCastle.Crypto.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
BrotliSharpLib.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
BrotliSharpLib.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
DiscordRPC.dll
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
DiscordRPC.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Downloader.dll
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Downloader.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
ICSharpCode.SharpZipLib.dll
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Memory.dll
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Memory.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
MetadataConverter.dll
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
MetadataConverter.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
Newtonsoft.Json.dll
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
RestSharp.dll
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
RestSharp.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
System.Management.dll
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
System.Management.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
Titanium.Web.Proxy.dll
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
Titanium.Web.Proxy.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
YuukiPS.exe
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
YuukiPS.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
YuukiPS.exe
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
YuukiPS.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
runtimes/win/lib/net6.0/System.Management.dll
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
runtimes/win/lib/net6.0/System.Management.dll
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
BouncyCastle.Crypto.dll
-
Size
2.8MB
-
MD5
9e5cb3062012f4f3a52b4b2e8dd0e00c
-
SHA1
86b9c7c80777d5e515384457850c9cc588f14bbd
-
SHA256
d81e97c5258286933b7f736161b6e20bf902cb9dd0b81abbb02dd2e008b7a83a
-
SHA512
2aae9aa7ec30a9b241645b796d854198804f4b6efd942df59f6f034b27423c0a5c71917c1f961a1f5d78a5a705854586cf121a90fb19ea08473aed6384de09b6
-
SSDEEP
49152:bycVQpi3azkY81o0NZQb6HIksfqaVvThuX2S/+qDn:JVQpi3Qk3G1huX2S/+gn
Score1/10 -
-
-
Target
BrotliSharpLib.dll
-
Size
1.3MB
-
MD5
7d2bb225ba6a5175a76c857e5c418268
-
SHA1
14d7132b9cf527803f1b3d8b8083548f01955cab
-
SHA256
419790cb1dddfd2dc6f9f26df93e0fe72211c3d5f5e411c7b73321abcd6be9ce
-
SHA512
2949c3bd336ffd147c190db46ba8706fcef48d8f4461086cd32869b65d6ec0e2787e2868cba87732735e18ce2ba8e016151a020f8d43f0bc5a93100d07be8b4e
-
SSDEEP
24576:R8Op+ZPe0AI/Ip+Tof6nHuFPZ7sYgdlTa/7oW/dGy/KmlQ82VHP3JYgprP5//pAk:R1p+ZPe0AI/Ip+Tof6nHuFPZ7sYgdlTO
Score1/10 -
-
-
Target
DiscordRPC.dll
-
Size
80KB
-
MD5
9ed0cc60faa1ca995f75dc8b4bf407c4
-
SHA1
87dc3a8ef47d8b2f6c0c4570adfe91188b7dc960
-
SHA256
acfde5b1463c95832dd7757a0407d7b81584d1f2aa5175095ca88a47535b2557
-
SHA512
9ae2c83aff79dbbde9ac3499a52398241cb9342eb12d3212dacebbaf5dd3d25fb1675b2a27982cbc77f1eb3f025ebc23b28581c40e374979d64fac3aad7c2771
-
SSDEEP
1536:q+nxJexI0myeXrvyBuaekzvaUUozZPM9o+mnxVS49:q+nex5mRXrvyzTe9o+mR9
Score1/10 -
-
-
Target
Downloader.dll
-
Size
86KB
-
MD5
ffd71df109688fa20c08ef1a2bb882a7
-
SHA1
f7b1e76e7a13a926c5b08db8593ae5667ce29206
-
SHA256
dde92f329c86629d7af0e1ed3d33741f86a821547fcadf5af1d9ac4dfa3b23ce
-
SHA512
5fce160106501781432f3f8bc049b17000d45114576682838d048eab73ed76740d3d3550ec935afb6a50a86c794b04adcdbb3f441fe18b77643da31cc38be676
-
SSDEEP
1536:LQf0ci/QbdMTn33Mt8JSFX2r24hGcKxND+ulIg9RTmZ+QH4W:T/QRMLMZBq24hGcKxNRT9QZGW
Score1/10 -
-
-
Target
ICSharpCode.SharpZipLib.dll
-
Size
240KB
-
MD5
cfbff4b71f423967464b91b60ee51855
-
SHA1
2d02071675e1166aa50d81daab673719caf6efd4
-
SHA256
c788b80b6e047d755b91303b50a908e6a793625639a863e984da3d113e329edb
-
SHA512
19635339e9cd35adac870a0be3cd16462dffc2190e46463ed34bba7f130761162f84ea71ffaa6608eb7c534c6ff4fdfec9c8709a3f0bef474166f9103056146c
-
SSDEEP
6144:doOAVFTumk10zr/zb3DFaCzf6sXxtaZvwJsYgO:vg3D/zf6s6MsY
Score1/10 -
-
-
Target
Memory.dll
-
Size
46KB
-
MD5
ad88389deb2c13ea6428b1d8f5acd486
-
SHA1
9512c73e4f41e8f66885933c8c0cc63282d3ac29
-
SHA256
25be45d69f9065b1236f022d9a05040f63f939a1ab730ed799ebf3c864626893
-
SHA512
8a2f7c622c803f7e935d8e2f5a64e7e95a1a0d98585a00cf14363188471755df70d5c3ccc6768d1cf881ba89594630222f029c3492aa4c851da876e0d0a7f142
-
SSDEEP
768:fMVw0nXJWOTETNxYch06B/S130sQpK/bWkJXA4MKHi0+2ISWFa5uOUOPc5tuTpql:UVjXJWOTETNA6BEklpkbWOA41C0+UlUB
Score1/10 -
-
-
Target
MetadataConverter.dll
-
Size
195KB
-
MD5
9c92e5a257b3ae032c79595829c11290
-
SHA1
575ae407a6e1b113402a07ebb0613c87e9d39327
-
SHA256
a1fe8872d80306a13e7975d2bbf76345c731b88c7efc51804a175de30994811a
-
SHA512
ae2160ead865040255d9321b51986d2efed9bb972cff7699615c99fc1d07bb98a1e067108c034290a56c01c64b1385d49382eeab0788148a27d01d22299d3340
-
SSDEEP
6144:rBRT7Y3RiX+hsQWL8fNSxll4GR36msl1IyGdv7bc/o4ZMX976Iid:rBRTuQNQWAfNSxll4GR36msl1IyGdv7Z
Score1/10 -
-
-
Target
Newtonsoft.Json.dll
-
Size
679KB
-
MD5
916d32b899f1bc23b209648d007b99fd
-
SHA1
e3673d05d46f29e68241d4536bddf18cdd0a913d
-
SHA256
72cf291d4bab0edd08a9b07c6173e1e7ad1abb7ab727fd7044bf6305d7515661
-
SHA512
60bd2693daa42637f8ae6d6460c3013c87f46f28e9b0dbf9d7f6764703b904a7c8c22e30b4ba13f1f23f6cbee7d9640ee3821c48110e67440f237c2bb2ee5eb6
-
SSDEEP
12288:1eos/POdGV5jfWrV/9Yeh9eRcyLfLYtT5mWxTZ/B7jW5JMtRRpKzQk:10/POdGV5jfW5VnhFyvOB7jW5JMty
Score1/10 -
-
-
Target
RestSharp.dll
-
Size
156KB
-
MD5
828194f6e9fe4f51c08415e457288479
-
SHA1
5982d431ee6737c1f56b96321bfe558a491c467c
-
SHA256
066a06b48f291d9ac27ce85a530f53a89ca2e2c26e5ec3916f22bf165941ce62
-
SHA512
26f7d639da30eaa8ce0e901386f3b7761b03d23bd9984dbbb6dfff87d5b7ecf9ad86e95e386fe2f9d66a3fe5c652b30faca01bd3561e40d80070feefd45c1c15
-
SSDEEP
3072:pLI4ri9X6c8rcCUUyzKkrexZjexjNZoYMLbZF/jqpkMdNBwMNw:q4rm6dMzPexGgLtMdNBnN
Score1/10 -
-
-
Target
System.Management.dll
-
Size
70KB
-
MD5
88b0572d04511832862a672aa59f6e57
-
SHA1
0c0c00a22ee85f5c053b90929941a1d4e892f87c
-
SHA256
a7387f80ef7e40f2f056d862a66afea0b16b46d101e69093dc7ba84f3d1d0881
-
SHA512
c3f313de263c996277a97121f804f8a21f7ac8bab36bf485605ffa281e30083f9a7ff783dc58e66a32e5a09669ff3798233b963764281b7ea8eb9afa43ea997a
-
SSDEEP
768:l3FJV6QNGiHKxqv/7F/dttlswUGcVzKkb46jf9LJKdbY2SdMEQj:l31/MiHKsFBqtRUkb46j99yc2SdMEo
Score1/10 -
-
-
Target
Titanium.Web.Proxy.dll
-
Size
376KB
-
MD5
8d37a1c56698ddc8f82e9cf37f6bcf8b
-
SHA1
0542d75640642036c5ddf6393cb086cec29d5a72
-
SHA256
a7ad286eaf07d8edd03ff25e2a7d7843193fa69ee51e59b4d3f92cb060a37494
-
SHA512
04a98cb15fbf3bceb2360e8d735018f8da7bf1fa4493b0cb99d3c64f3994a20bd0923f020171a72701d01b3f01547f4a268eb404787a4a014a94663095973ac5
-
SSDEEP
6144:zo9TLopeKibeCAuyEpjkVN0GD/CBD/4vqb3LCUif:zQXOeKNCAuyI5lBD/4+
Score1/10 -
-
-
Target
YuukiPS.dll
-
Size
840KB
-
MD5
b5149b239c7235615e6928250eded44f
-
SHA1
b48772a0ddc6d5f3519ca69a5c1bb88d32d9fdbf
-
SHA256
f0cb7f4584f6999872251afb3158eca162d701f17fb065ffbd89837d4e87c864
-
SHA512
13edc2594d53387c8d0de2ff045706ba4e29aa5541fa1fe02ffc7e270e874093536b87b7588c0eedb3c718d29adbdc3583f9cd6ca9b98800b61c3f14cddc2dba
-
SSDEEP
12288:UShRJTOYyQqiY2BsimhyOr9bJG5ZmG+mvc7WjfjCgTOA21lMjyzI:F8iSLJWEGdcqjfGgTOAGlM
Score1/10 -
-
-
Target
YuukiPS.exe
-
Size
835KB
-
MD5
fad53027f7711774f0b92e11c4dfa7fe
-
SHA1
1f2b87c2cd8579cc9e02c11003c4995f74ab055c
-
SHA256
3c983680f64ca58ec0d4998acd0ef072b3e50f945e903790716e5fca31360a16
-
SHA512
438379683c2cbaa2641c4c846161aef83e0755036cb0c49474db8ab5714c00a2828ad6381627af886a5353879d591d6c298e02fb982c4dbd68c7427f31dfe73e
-
SSDEEP
12288:vLXxegOjdBsimhyOr9buG5ZmG+mvc7WjfjCgTOA21lMjyzI:DlO8LJTEGdcqjfGgTOAGlM
Score1/10 -
-
-
Target
runtimes/win/lib/net6.0/System.Management.dll
-
Size
284KB
-
MD5
83cda4cc597e6a0b2ebbd1b8f41e94d3
-
SHA1
10415fa323a21d412eb36e583a98385088065d61
-
SHA256
aa474c96b9fd17cb3580d89bb8eb716cb1407c89026b5e8180402666eeeb766a
-
SHA512
ff7d869d416e3c47c082b8bd2d6907bbbe457d17d093cd84f66d42b978d143c088e008388041b440b01f7d82e373dde9b1b5c1acfd9553f98a63fa579d7ec8d2
-
SSDEEP
6144:HG17jgxtTSfK7JK7XUUmhOzZiRZHhGASipzvZhHcx:HG17jgfefK747ZmhOzZiRZH2wgx
Score1/10 -